$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0cce162-369c-3645-8b8e-3e3664dbc14b.roa File: b0cce162-369c-3645-8b8e-3e3664dbc14b.roa (raw, json) Hash identifier: JVgOIDKYu/psxjhuf/P8CoIxiBa5TLgqIbdMO2XT00A= Subject key identifier: 96:3B:DB:4A:A4:72:D3:73:30:68:5D:89:6C:C6:E4:39:34:CD:E9:20 Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Certificate serial: 010D0C9F4328584F3FAD4AA39B3CB77BC3486480 Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0cce162-369c-3645-8b8e-3e3664dbc14b.roa Signing time: Mon 21 Sep 2026 13:00:12 +0000 ROA not before: Mon 21 Sep 2026 13:00:12 +0000 ROA not after: Sun 20 Dec 2026 14:00:12 +0000 asID: 16625 IP address blocks: 23.43.8.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Sep 2026 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:3f:ad:4a:a3:9b:3c:b7:7b:c3:48:64:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809 Validity Not Before: Sep 21 13:00:12 2026 GMT Not After : Dec 20 14:00:12 2026 GMT Subject: CN=63ab09e5-60a6-45dc-b689-110985dfab69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:15:73:7d:69:aa:f9:87:22:86:05:e0:be: c6:5a:72:3d:3d:e2:39:fa:a7:ed:be:3b:34:74:50: a5:0f:d5:61:05:59:68:49:10:16:ab:ab:29:45:9a: bb:34:1b:0d:25:c8:fe:96:30:2f:93:db:49:1b:c2: 51:33:33:b5:6d:bd:a0:b2:da:91:cf:f9:f2:5b:1b: 07:43:ac:fb:23:ff:7a:14:9d:54:a2:6f:07:24:c8: fe:12:2f:2a:2c:8e:09:b8:85:2b:39:4a:71:6d:03: 88:d9:bb:ea:12:e3:4b:a9:9e:1b:e4:68:1e:65:74: a7:94:79:f3:0b:52:51:4e:a4:97:23:3f:13:59:0e: 00:31:af:11:3e:cd:c5:5f:58:31:0e:47:d7:69:a1: b4:89:dc:f9:a1:7e:91:cb:0c:04:4c:0e:e1:1b:03: 17:23:dc:4a:b1:46:6e:78:b7:93:de:bb:b3:96:5c: 51:24:f5:d5:b7:81:22:3a:93:c5:f1:12:27:1e:a8: 7e:45:ea:c2:95:f0:b6:a7:dc:7e:ec:96:98:1c:da: 14:33:85:df:24:b2:f7:35:19:28:73:52:53:7e:7d: f1:75:ed:9c:89:f8:59:e8:08:24:2c:b9:fc:5e:df: d6:83:18:8a:8b:ea:25:76:4a:ee:3d:9c:08:f3:05: 81:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3B:DB:4A:A4:72:D3:73:30:68:5D:89:6C:C6:E4:39:34:CD:E9:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/b0cce162-369c-3645-8b8e-3e3664dbc14b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl X509v3 Authority Key Identifier: keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer sbgp-ipAddrBlock: critical IPv4: 23.43.8.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:20:18:79:c0:c6:5a:fb:66:f9:dd:93:d5:7b:bb:6d:c2:df: 3c:48:3c:53:21:9b:69:df:c2:2d:63:a8:73:c2:f8:f4:c1:b6: eb:60:7d:a1:64:b9:24:75:b4:40:e6:ea:56:f5:0b:a1:ef:14: 61:3f:f5:38:2e:e6:d7:00:b8:0c:8f:55:5a:c2:00:4f:5c:a1: 58:de:bc:5b:23:08:7e:13:62:e2:64:75:d3:57:05:b6:1b:d9: 15:bf:4a:6e:26:3a:23:03:19:3b:64:c7:6d:c9:eb:a0:ff:47: 0a:45:99:7d:2d:b3:31:c3:ff:60:e5:f9:b9:ed:a5:f2:b8:89: 8b:af:ec:d6:1f:d3:09:fa:03:6f:f7:e1:fc:62:2b:e9:be:11: 18:9b:79:52:e1:db:bb:f7:60:54:c7:42:dc:43:7e:41:85:80: 8b:21:3a:be:4e:1f:ec:6a:98:75:d5:7b:b4:c1:60:ed:e4:39: 97:05:51:5c:5f:95:ac:70:16:46:7e:3f:33:87:80:1e:fe:ec: ae:f1:2e:b7:ed:cf:76:b6:07:7d:2a:7c:4d:87:e2:93:f8:d8: e7:8b:ba:14:82:ae:e7:a2:05:fc:e4:27:c4:6f:80:c5:9a:d4: 0e:b0:fa:62:82:2d:94:d4:d9:25:dd:5a:75:be:93:93:96:64: 76:2a:75:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8/rUqjmzy3e8NIZIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm ODA5MB4XDTI2MDkyMTEzMDAxMloXDTI2MTIyMDE0MDAxMlowLzEtMCsGA1UEAxMk NjNhYjA5ZTUtNjBhNi00NWRjLWI2ODktMTEwOTg1ZGZhYjY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYwVc31pqvmHIoYF4L7GWnI9PeI5+qftvjs0 dFClD9VhBVloSRAWq6spRZq7NBsNJcj+ljAvk9tJG8JRMzO1bb2gstqRz/nyWxsH Q6z7I/96FJ1Uom8HJMj+Ei8qLI4JuIUrOUpxbQOI2bvqEuNLqZ4b5GgeZXSnlHnz C1JRTqSXIz8TWQ4AMa8RPs3FX1gxDkfXaaG0idz5oX6RywwETA7hGwMXI9xKsUZu eLeT3ruzllxRJPXVt4EiOpPF8RInHqh+RerClfC2p9x+7JaYHNoUM4XfJLL3NRko c1JTfn3xde2cifhZ6AgkLLn8Xt/WgxiKi+oldkruPZwI8wWB6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJY720qkctNzMGhdiWzG5Dk0zekgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYjBjY2UxNjItMzY5Yy0z NjQ1LThiOGUtM2UzNjY0ZGJjMTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDFysIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsgGHnAxlr7Zvndk9V7u23C3zxIPFMhm2nfwi1jqHPC+PTBtutgfaFk uSR1tEDm6lb1C6HvFGE/9Tgu5tcAuAyPVVrCAE9coVjevFsjCH4TYuJkddNXBbYb 2RW/Sm4mOiMDGTtkx23J66D/RwpFmX0tszHD/2Dl+bntpfK4iYuv7NYf0wn6A2/3 4fxiK+m+ERibeVLh27v3YFTHQtxDfkGFgIshOr5OH+xqmHXVe7TBYO3kOZcFUVxf laxwFkZ+PzOHgB7+7K7xLrftz3a2B30qfE2H4pP42OeLuhSCrueiBfzkJ8RvgMWa 1A6w+mKCLZTU2SXdWnW+k5OWZHYqdYc= -----END CERTIFICATE-----Generated at Wed Sep 23 23:58:34 2026 by rpki-client